Kdenlive v17.12.3 crashes with Title Clips

Sun Mar 18 15:49:46 UTC 2018

Hello list,

Kdenlive v17.12.3 (also tried latest master, same effect) both crash
reproducibly on my machine (x86_64, Ubuntu Mate Artful) with memory
corruption when clicking "Add title clip". In seldom cases (about 1 in
10) the Title dialog actually opens. In these cases, kdenlive crashes
when hitting "OK" on the Title dialog.

In the terminal I see:

*** Error in `kdenlive': corrupted size vs. prev_size:
0x0000558cbee63b80 ***
Aborted (core dumped)

I'm using mostly git master HEAD versions of packages (vid.stab, libvpx,
x264, swfdec, libepoxy, movit, frei0r, FFmpeg, mlt) with the exception
of lame (3.99.5), libx265 (2.7), liboil (0.3.17) and libeigen (3.2.4).

When running in gdb, I see the following stacktrace:

#0  0x00007ffff04290bb in __GI_raise (sig=sig at entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff042af5d in __GI_abort () at abort.c:90
#2  0x00007ffff047328d in __libc_message (action=action at entry=do_abort,
fmt=fmt at entry=0x7ffff059a528 "*** Error in `%s': %s: 0x%s ***\n") at
../sysdeps/posix/libc_fatal.c:181
#3  0x00007ffff047a64a in malloc_printerr (action=<optimized out>,
str=0x7ffff0596dee "corrupted size vs. prev_size", ptr=<optimized out>,
ar_ptr=<optimized out>)
    at malloc.c:5426
#4  0x00007ffff047ea15 in _int_malloc (av=av at entry=0x7ffff07ccc20
<main_arena>, bytes=bytes at entry=400) at malloc.c:4035
#5  0x00007ffff0480f3e in __GI___libc_malloc (bytes=400) at malloc.c:3086
#6  0x00007ffff71fd982 in mlt_properties_add (name=0x7fffffffb120 "0",
self=0x555559006270) at mlt_properties.c:553
#7  0x00007ffff71fd982 in mlt_properties_fetch
(self=self at entry=0x555559006270, name=name at entry=0x7fffffffb120 "0") at
mlt_properties.c:587
#8  0x00007ffff71fd9d1 in mlt_properties_set_data
(self=self at entry=0x555559006270, name=name at entry=0x7fffffffb120 "0",
value=value at entry=0x555558ff03a0, length=length at entry=0,
destroy=destroy at entry=0x7ffff7201de0 <mlt_event_close>,
serialise=serialise at entry=0x0) at mlt_properties.c:1146
#9  0x00007ffff7202382 in mlt_events_listen
(self=self at entry=0x555558fb6930, service=service at entry=0x555558fb6930,
id=id at entry=0x7fffb5f58675 "service-changed",
listener=listener at entry=0x7fffb5f57840 <on_service_changed>) at
mlt_events.c:280
#10 0x00007fffb5f5845e in filter_deinterlace_init (profile=<optimized
out>, type=<optimized out>, id=<optimized out>, arg=0x0) at
filter_deinterlace.c:351
#11 0x00007ffff720f05a in mlt_factory_filter
(profile=profile at entry=0x555558ffdf90,
service=service at entry=0x555558ffc1e0 "deinterlace", input=0x0) at
mlt_factory.c:370
#12 0x00007fffb6fd0604 in create_filter
(profile=profile at entry=0x555558ffdf90,
producer=producer at entry=0x555558f75480, effect=<optimized out>,
created=created at entry=0x7fffffffb27c) at producer_loader.c:170
#13 0x00007fffb6fce092 in attach_normalisers
(profile=profile at entry=0x555558ffdf90,
producer=producer at entry=0x555558f75480) at producer_loader.c:206
#14 0x00007fffb6fd07c3 in producer_loader_init (profile=0x555558ffdf90,
type=<optimized out>, id=<optimized out>, arg=<optimized out>) at
producer_loader.c:231
#15 0x00007ffff720ef3a in mlt_factory_producer (profile=0x555558ffdf90,
service=0x55555660c0b0 "loader", service at entry=0x0,
resource=resource at entry=0x555558fabed8)
    at mlt_factory.c:342
#16 0x00007ffff6fdfbbf in Mlt::Producer::Producer(Mlt::Profile&, char
const*, char const*) (this=0x555558fc1d50, profile=..., id=<optimized
out>, service=0x0)
    at MltProducer.cpp:41
#17 0x0000555555afd822 in KThumb::getImage(QUrl const&, int, int, int) ()
#18 0x0000555555a18956 in TitleWidget::refreshTitleTemplates(QString
const&) ()
#19 0x0000555555a1749d in TitleWidget::TitleWidget(QUrl const&, Timecode
const&, QString const&, Render*, QWidget*) ()
#20 0x0000555555893cc2 in
ClipCreationDialog::createTitleClip(KdenliveDoc*, QStringList const&,
QString const&, Bin*) ()
#21 0x0000555555ab4109 in Bin::slotCreateProjectClip() ()
#22 0x0000555555b5ccce in Bin::qt_static_metacall(QObject*,
QMetaObject::Call, int, void**) ()
#23 0x00007ffff11668e5 in QMetaObject::activate(QObject*, int, int,
void**) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#24 0x00007ffff31edd82 in QAction::triggered(bool) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#25 0x00007ffff31f046c in QAction::activate(QAction::ActionEvent) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#26 0x00007ffff3348e1c in  () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#27 0x00007ffff335018b in  () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#28 0x00007ffff3350fd3 in QMenu::mouseReleaseEvent(QMouseEvent*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#29 0x00007ffff3234dc8 in QWidget::event(QEvent*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#30 0x00007ffff33531f3 in QMenu::event(QEvent*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#31 0x00007ffff31f446c in QApplicationPrivate::notify_helper(QObject*,
QEvent*) () at /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#32 0x00007ffff31fc28f in QApplication::notify(QObject*, QEvent*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#33 0x00007ffff1137de8 in QCoreApplication::notifyInternal2(QObject*,
QEvent*) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#34 0x00007ffff31fb262 in QApplicationPrivate::sendMouseEvent(QWidget*,
QMouseEvent*, QWidget*, QWidget*, QWidget**, QPointer<QWidget>&, bool) ()
    at /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#35 0x00007ffff324f685 in  () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#36 0x00007ffff3251fba in  () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#37 0x00007ffff31f446c in QApplicationPrivate::notify_helper(QObject*,
QEvent*) () at /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#38 0x00007ffff31fbd34 in QApplication::notify(QObject*, QEvent*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#39 0x00007ffff1137de8 in QCoreApplication::notifyInternal2(QObject*,
QEvent*) () at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#40 0x00007ffff16f6f43 in
QGuiApplicationPrivate::processMouseEvent(QWindowSystemInterfacePrivate::MouseEvent*)
() at /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5
#41 0x00007ffff16f8a25 in
QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*)
() at /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5
#42 0x00007ffff16d0cab in
QWindowSystemInterface::sendWindowSystemEvents(QFlags<QEventLoop::ProcessEventsFlag>)
() at /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5
#43 0x00007fffe35b55a0 in  () at /usr/lib/x86_64-linux-gnu/libQt5XcbQpa.so.5
#44 0x00007fffeb8a8fb7 in g_main_context_dispatch () at
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#45 0x00007fffeb8a91f0 in  () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#46 0x00007fffeb8a927c in g_main_context_iteration () at
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#47 0x00007ffff119047f in
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>)
() at /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#48 0x00007ffff1135e3a in
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () at
/usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#49 0x00007ffff334df60 in QMenu::exec(QPoint const&, QAction*) () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#50 0x00007ffff339023b in  () at
/usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#51 0x00007ffff3391017 in QToolButton::mousePressEvent(QMouseEvent*) ()
at /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
[...]

If there's more information I can provide, please let me know.

Thank you very much,
Johannes